Hello Everyone,

I have a question regarding policy enforcement in a workgroup environment where devices are enrolled into Intune (e.g., via package provisioning). In this scenario, users continue to log in with their local accounts/profiles on Windows rather than using Azure AD accounts.

Do we need to configure all policies to target devices only, given that the users aren’t logging in with Azure AD accounts?

If policies are assigned to AAD users, will they be applied, or will they be ignored because users are logging in with their local accounts?

Your guidance and insights on the best approach for managing policies in this setup would be greatly appreciated.

Thank you

​Hello Everyone,I have a question regarding policy enforcement in a workgroup environment where devices are enrolled into Intune (e.g., via package provisioning). In this scenario, users continue to log in with their local accounts/profiles on Windows rather than using Azure AD accounts. Do we need to configure all policies to target devices only, given that the users aren’t logging in with Azure AD accounts?If policies are assigned to AAD users, will they be applied, or will they be ignored because users are logging in with their local accounts? Your guidance and insights on the best approach for managing policies in this setup would be greatly appreciated.Thank you  Read More

​